Senior IT Security Specialist

SUMMARY:
Senior IT Security Specialist

POSITION INFO:

KEY PERFORMANCE AREAS (DUTIES & RESPONSIBILITIES):

1. Cyber Security Program

• Understand Sasria’s strategy and the cybersecurity implications to enable digital trust within Sasria’s operations and platforms.

• Design, configure, deploy, and maintain security controls to safeguard Sasria’s infrastructure.

• Actively protect the organization’s information technology assets and infrastructure from external or internal threats and ensure compliance with statutory and regulatory requirements regarding information access, security, and privacy.

• Analyse problems, and recommend solutions, products, and technologies to meet business security and information security objectives.

• Perform security assessments for all systems and applications, and check for compliance with cybersecurity standards and regulations in projects and new systems design implementation.

• Interpret the cybersecurity strategy and framework

• Interpret cybersecurity maturity levels and implementation road maps • Lead the implementation of best practice network security controls across cloud environments (AWS and AZURE) and On-premises platforms to maintain resistance against cyberattacks.

2. Data protection and encryption

• Understand organizational information data flow and maintain an inventory of data to ensure sensitive information is identified and protected adequately.

• Understand data classification framework and implement controls as per sensitivity levels.

• Ensure protection of data with advanced data encryption, data masking, or tokenization, to protect data across applications, transactions, storage, and big data platforms, on endpoints, servers, databases, and cloud environments.

• Develop or install software, such as data encryption programs for data at rest, in transit, and in use such as SSL certificates to protect sensitive information.

• Develop best practices for Crypto Key Management across the organization and maintain safe and responsible use of cryptographic keys. 3. Network, web and Endpoint Security and monitoring

• Build, maintain and upgrade security technology, such as firewalls, web application firewalls; network access controls; web security controls; endpoint security controls for the safe use of computer networks, and the transmission and retrieval of information during business operations.

• Maintain the malware and destructive activities policy rules across security platforms to ensure business continuity while security is maintained. • Coordinate monitoring of networks or systems for security breaches or intrusions across Cloud and On-premises platforms.

• Ensure endpoint security controls have covered the whole Sasria landscape and remain effective in identifying and mitigating threats in line with the in-depth layered defence approach.

4. Threat and vulnerability Management

• Lead threat landscape assessment and situational Cyber-attack Vulnerability awareness through an understanding of the vulnerability Detection, Management management program.

• Ensure vulnerability assessments and penetration tests are performed periodically.

• Analyse and interpret vulnerability results and facilitate Protection, and Response Maturity levels remediation of identified vulnerabilities in conjunction with other IT departments, and business applications owners.

• Provide reports to various forums on the vulnerability management program

• Continuously scan the threat landscape to identify threats facing the Sasria environment and provide proactive suggestions on prevention.

5. Physical security

• Support facilities with the implementation of physical security measures designed to deny unauthorized access to Sasria premises.

• Ensure robust and fit-for-purpose access controls, surveillance cameras, and intrusion systems.

• Ensure advanced controls are in place for high-risk areas such as data centers and computer storage areas. 6. Disaster recovery and business continuity

• Support the development of disaster response and recovery strategies within Sasria.

• Ensure seamless transition between Sasria and the disaster recovery site during security breaches or other business interruptions.

• Troubleshoot security and network problems to maintain a fit-for-purpose DR site and business continuity - plans.

7. Incident response and third line support

• Provide second-line support to users with any Information Security related queries within the SLA period.

• Provide technical support to computer users for installation and use of security products.

• Oversee and provide advanced support on open issues (e.g., customer logged tickets, incidents, projects, etc.)

• Assist in incident response for any breaches, intrusions, or theft.

• Coach and guide Service desk and IT support in their incident response regarding security, and appropriately escalating issues in line with the service management processes and procedures.

8. Ad hoc

• Continuously develop information security standards and best practices to respond to the changing environment. • Follow the Procurement processes to purchase and identify the right service providers for security services. • Oversee Third-party service delivery in line with defined service level agreements • Train and groom the upcoming junior IT staff. • Troubleshoot security and network problems. • Write Security reports and performance of security controls using performance indicators. • Research identify and recommend improvement to capabilities and maturity of threat and vulnerability management strategy, policy, standards, processes, procedures, and tools to deliver value to the business. • Maintains system documentation and configuration data for security tools and processes for regulatory and audit purposes. • Assist in the development of procedures running the department

• Control the departmental budget ensuring expenditure remains within the set parameters.

Qualifications and Experience:

• A relevant diploma/degree in Information Communication Technology Relevant IT security certifications (CompTIA Security+, CISCO certified, Fortinet certified, CISSP, ITIL, COBIT, etc.) • More than 6 years of Information and Technology security experience with advanced knowledge of the following technology environments: Darktrace Technology, Fortinet Firewalls Zscaler Technology, Mimecast, Crowd strike and familiarity with industry SIEM solutions. Knowledge • Cyber security controlling and monitoring • Cyber security tools & frameworks • Understanding Sasria regulations, wordings and procedures • Good knowledge of Insurance-related regulations • Good knowledge of Sasria product offering Technical skills: • Interpreting data • Managing relationships • Emotional resilience • Embracing change • Team working • Managing work • Driving results • Upholding standards Attributes and Values: • Initiative-taking • Reliable • Deadline driven • Collaborator and Team player • Maintains high integrity and meets strict accuracy • Prominent level of communication at all levels • Analytical • Stress tolerance and flexibility • Trustworthy• Exercise judgment and decision making • Maintain confidentiality • Punctuality and good time management • The ability to work on various projects at once • Mindfulness

NB! This job is now closed. You can apply for other jobs by uploading your CV.